Hi Everyone,

Our vulnerability tool reports below list for NFS exported shares . Tool used here Qualys and ID is listed below.

we have similar issue in VNX exported file shares and I am aware about the fix of changing (forceFullShowmount  parameter on datamover ) do we have any similar fix for Isilon 8.1 ?

NFS Exported Filesystems List Vulnerability (QID 66002)
This system is running a Network File System (NFS) server that enables a remote host to access and
share files and directories. The current configuration of this system gives both authorized and
unauthorized users the list of exported disks and authorized hosts.

This list discloses information about your internal organization and network architecture. It provides
information about where data is stored, whether the server is heavily secured, and lists hosts that can
be attacked. The list also contains a source of valuable information, which can be used in a spoofing
attack.
If the NFS server is not required on this system, then shutdown and disable the "mountd" and "nfsd"
RPC services.
If the NFS server is required on this system, then the solution is not as simple. Since the server's clients
need to be able to access the export list, this service cannot be shutdown. Access can be restricted to
hosts on the local network or hosts that are authorized clients of this server. Use either a packet filter at
the system level (local packet filter) or a centralized packet filter on the firewall. Note, however, that
using a firewall in front of your network will not secure the service itself, but will limit the risk to internal
attacks.
This vulnerability is confirmed by exploiting the vulnerability.